WHAT IS CLAIMED IS: 



1. A Web Service system, comprising: 

a service provider configured to provide one or more services on the Web Service 
5 system; 

one or more service requesters configured to access the one or more services from 

the service provider via a network; 
wherein the Web Service system is configured according to a vendor-independent 
architecture framework for designing Web Services comprising a plurality 
10 of heterogeneous components in accordance with a structured 

methodology and one or more design patterns. 

2. The Web Service system as recited in claim 1, wherein the architecture framework 
is configured to incorporate Quality of Services including reliability, scalability, and 

15 availability on the Web Service system. 

3. The Web Service system as recited in claim 1, further comprising a service broker 
configured to interact with the service provider and service requester to negotiate and 
provide the services of the service provider to the service requester. 

20 

4. The Web Service system as recited in claim 3, wherein the service provider is 
configured to serve as the service broker. 

5. The Web Service system as recited in claim 1, further comprising a service 
25 registry, wherein the service provider is further configured to register and publish the 

services in the service registry, and wherein the service requester is further configured to 
discover the service provider through the service registry. 

6. The Web Service system as recited in claim 1, wherein the Web Service system is 
30 a Business-to-Consumer Web Service, wherein the service provider is a business service 
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provider, and wherein the service requester is an end user. 

7. The Web Service system as recited in claim 1, wherein the Web Service system is 
a Business-to-Business Web Service, wherein the service provider is a business service 

5 provider, and wherein the service requester is a server. 

8. The Web Service system as recited in claim 1, wherein the Web Service system 
comprises a plurality of layers, wherein the plurality of layers comprises two or more of: 

a network layer configured to serve as an underlying network for services; 
10 a transport layer for delivering messages between components of the Web Service 

system; 

a service description language layer configured to describe service type and 
functionality of the services of the service provider; 

a transaction routing layer configured to route messages on the transport layer; 
15 a service discovery layer configured to search for and locate services; 

a service negotiation layer configured to negotiate exchanges between the service 
requesters and the service provider; 

a management layer configured for provisioning of the services and for 
monitoring and administration of the services; 
20 a Quality of Service layer configured to provide reliability, scalability, and 

availability on the Web Service system; 

a security layer configured to provide authentication, entitlement, and non- 
repudiation security on the transport layer; and 

an Open Standards layer. 

25 

9. The Web Service system as recited in claim 8, wherein the Open Standards layer 
is XML. 

10. The Web Service system as recited in claim 8, wherein the network layer is the 
30 public Internet over TCP/IP. 
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11. The Web Service system as recited in claim 8, wherein the transport layer is one 
of HTTP, SMTP, and SOAP over HTTP. 

12. The Web Service system as recited in claim 1, wherein the design patterns include 
one or more of: 

one or more scalability design patterns; 
one or more reliability design patterns 
one or more manageability design patterns; 
one or more availability design patterns; and 
one or more security design patterns. 

13. The Web Service system as recited in claim 1, wherein the design patterns include 
one or more of: 

one or more Quality of Services design patterns; 
one or more Integration design patterns; and 
one or more Security design patterns. 

14. The Web Service system as recited in claim 13, wherein the Quality of Services 
design patterns include one or more of: 

a SOAP Cache Design Pattern; 

a Java Message Service (JMS) Bridge Design Pattern; 

a Multiple Servlet Engines Design Pattern; 

an HTTP Load Balancer Design Pattern; 

a State Management Design Pattern; 

a SOAP Logger Design Pattern; 

a High Availability of Service Registry Design Pattern; 

a UDDI Deployment Design Pattern; 

a Publish, Unpublish, and Discover Web Services Design Pattern; 

a Version Management of Deployment and Service Registry Design Pattern; and 
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a Registry Content Management Design Pattern. 

15. The Web Service system as recited in claim 13, wherein the Integration design 
patterns include one or more of: 

an Application-to-Application Design Pattern; 

a Standard Build Design Pattern; 

a Hub-Spoke Replication Design Pattern; 

a Federated Replication Design Pattern; 

a Multi-Step Application Integration Design Pattern; 

a Data Exchange Design Pattern; 

a Closed Process Integration Design Pattern; 

an Open Process Integration Design Pattern; 

a Service Consolidation-Broker Integration design pattern; and 

a Reverse Auction-Broker Integration design pattern. 

16. The Web Service system as recited in claim 13, wherein the Security design 
patterns include one or more of: 

a Single Sign-on Design Pattern; and 
a Messaging Transport Design Pattern. 

17. The Web Service system as recited in claim 1, wherein the Web Service system 
comprises two or more of: 

a client tier; 

a presentation tier; 

a business tier; 

an integration tier; and 

a resource tier. 
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18. A system for generating a vendor-independent Web Service architecture 
comprising a plurality of heterogeneous components, comprising: 

means for generating one or more Use Cases for the Web Service in accordance 
with one or more design patterns; 
5 means for generating a high-level architecture for the Web Service and in 

accordance with the one or more design patterns, wherein the high-level 
architecture identifies two or more entities of the Web Service and the 
relationships and interactions among the entities; and 
means for generating a logical architecture for the Web Service according to the 
10 use case scenarios and in accordance with the one or more design patterns, 

wherein the logical architecture identifies two or more logical components 
of the Web Service and the relationship among the logical components, 
and wherein the logical architecture comprises two or more layers. 

15 19. The system as recited in claim 18, wherein the Web Service architecture 
incorporates Quality of Services including reliability, scalability, and availability on the 
Web Service system. 



20 20. A method, comprising: 

generating a vendor-independent Web Service architecture comprising a plurality 
of heterogeneous components in accordance with one or more design 
patterns, wherein said generating a vendor-independent Web Services 
architecture comprises: 

25 

generating one or more Use Cases for the Web Service; 

generating a high-level architecture for the Web Service, wherein the high- 
level architecture identifies two or more entities of the Web 
Service and the relationships and interactions among the entities; 
30 generating a logical architecture for the Web Service according to the use 
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case scenarios, wherein the logical architecture identifies two or 
more logical components of the Web Service and the relationship 
among the logical components, and wherein the logical architecture 
comprises two or more layers; and 

5 

implementing the Web Service according to the Web Service architecture. 

21. The method as recited in claim 20, wherein said generating a high-level 
architecture for the Web Service comprises identifying one or more Open Standards 

10 protocols for use in said interactions among the entities. 

22. The method as recited in claim 20, wherein the Web Service architecture 
incorporates Quality of Services including reliability, scalability, and availability on the 
Web Service. 

15 

23. The method as recited in claim 20, wherein the entities comprise: 

a service provider configured to provide one or more services on the Web Service; 
and 

one or more service requesters configured to access the one or more services from 
20 the service provider via a network. 

24. The method as recited in claim 23, wherein the entities further comprise a service 
broker configured to interact with the service provider and service requester to negotiate 
and provide the services of the service provider to the service requester. 

25 

25. The method as recited in claim 23, wherein the entities further comprise a service 
registry, wherein the service provider is further configured to register and publish the 
services in the service registry, and wherein the service requester is further configured to 
discover the service provider through the service registry. 

30 
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26. The method as recited in claim 23, wherein the Web Service is a Business-to- 
Consumer Web Service, wherein the service provider is a business service provider, and 
wherein the service requester is an end user. 

27. The method as recited in claim 23, wherein the Web Service is a Business-to- 
Business Web Service, wherein the service provider is a business service provider, and 
wherein the service requester is a server. 

28. The method as recited in claim 23, wherein the layers of the logical architecture 
comprise two or more of: 

a network layer configured to serve as an underlying network for services; 
a transport layer for delivering messages between components of the Web 
Service; 

a service description language layer configured to describe service type and 
functionality of the services of the service provider; 

a transaction routing layer configured to route messages on the transport layer; 

a service discovery layer configured to search for and locate services; 

a service negotiation layer configured to negotiate exchanges between the service 
requesters and the service provider; 

a management layer configured for provisioning of the services and for 
monitoring and administration of the services; 

a Quality of Service layer configured to provide reliability, scalability, and 
availability on the Web Service; 

a security layer configured to provide authentication, entitlement, and non- 
repudiation security on the transport layer; and 

an Open Standards layer. 

29. The method as recited in claim 28, wherein the Open Standards layer is XML. 
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30. The method as recited in claim 28, wherein the network layer is the public Internet 
over TCP/IP. 

31. The method as recited in claim 28, wherein the transport layer is one of HTTP, 
5 SMTP, and SOAP over HTTP. 

32. The method as recited in claim 20, wherein the design patterns include one or 
more of: 

one or more scalability design patterns; 
10 one or more reliability design patterns 

one or more manageability design patterns; 
one or more availability design patterns; and 
one or more security design patterns. 

15 33. The method as recited in claim 20, wherein the design patterns include one or 
more of: 

one or more Quality of Services design patterns; 
one or more Integration design patterns; and 
one or more Security design patterns. 

20 

34. The method as recited in claim 33, wherein the Quality of Services design patterns 
include one or more of: 

a SOAP Cache Design Pattern; 

a Java Message Service (JMS) Bridge Design Pattern; 
25 a Multiple Servlet Engines Design Pattern; 

an HTTP Load Balancer Design Pattern; 

a State Management Design Pattern; 

a SOAP Logger Design Pattern; 

a High Availability of Service Registry Design Pattern; 
30 a UDDI Deployment Design Pattern; 
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a Publish, Unpublish, and Discover Web Services Design Pattern; 

a Version Management of Deployment and Service Registry Design Pattern; and 

a Registry Content Management Design Pattern. 

35. The method as recited in claim 33, wherein the Integration design patterns include 
one or more of: 

an Application-to- Application Design Pattern; 

a Standard Build Design Pattern; 

a Hub-Spoke Replication Design Pattern; 

a Federated Replication Design Pattern; 

a Multi-Step Application Integration Design Pattern; 

a Data Exchange Design Pattern; 

a Closed Process Integration Design Pattern; 

an Open Process Integration Design Pattern; 

a Service Consolidation-Broker Integration design pattern; and 

a Reverse Auction-Broker Integration design pattern. 

36. The method as recited in claim 33, wherein the Security design patterns include 
one or more of: 

a Single Sign-on Design Pattern; and 
a Messaging Transport Design Pattern. 

37. The method as recited in claim 20, wherein the logical architecture further 
comprises a plurality of tiers, wherein the tiers comprise two or more of: 

a client tier; 

a presentation tier; 

a business tier; 

an integration tier; and 

a resource tier. 
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38. A computer-accessible medium comprising program instructions, wherein the 
program instructions are configured to implement: 

generating a vendor-independent Web Service architecture comprising a plurality 
of heterogeneous components in accordance with one or more design 
patterns, wherein said generating a vendor-independent Web Services 
architecture comprises: 

generating one or more Use Cases for the Web Service; 

generating a high-level architecture for the Web Service, wherein the high- 
level architecture identifies two or more entities of the Web 
Service and the relationships and interactions among the entities; 

generating a logical architecture for the Web Service according to the use 
case scenarios, wherein the logical architecture identifies two or 
more logical components of the Web Service and the relationship 
among the logical components, and wherein the logical architecture 
comprises two or more layers; and 

implementing the Web Service according to the Web Service architecture. 

39. The computer-accessible medium as recited in claim 38, wherein, in said 
generating a high-level architecture for the Web Service, the program instructions are 
further configured to implement identifying one or more Open Standards protocols for 
use in said interactions among the entities. 

40. The computer-accessible medium as recited in claim 38, wherein the Web Service 
architecture incorporates Quality of Services including reliability, scalability, and 
availability on the Web Service. 

41. The computer-accessible medium as recited in claim 38, wherein the entities 
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comprise: 

a service provider configured to provide one or more services on the Web Service; 
and 

one or more service requesters configured to access the one or more services from 
5 the service provider via a network. 



42. The computer-accessible medium as recited in claim 41, wherein the entities 
further comprise a service broker configured to interact with the service provider and 
service requester to negotiate and provide the services of the service provider to the 
10 service requester. 



43. The computer-accessible medium as recited in claim 41, wherein the entities 
further comprise a service registry, wherein the service provider is further configured to 
register and publish the services in the service registry, and wherein the service requester 

15 is further configured to discover the service provider through the service registry. 

44. The computer-accessible medium as recited in claim 41, wherein the Web Service 
is a Business-to-Consumer Web Service, wherein the service provider is a business 
service provider, and wherein the service requester is an end user. 

20 

45. The computer-accessible medium as recited in claim 41, wherein the Web Service 
is a Business-to-Business Web Service, wherein the service provider is a business service 
provider, and wherein the service requester is a server. 

25 46. The computer-accessible medium as recited in claim 41, wherein the layers of the 
logical architecture comprise two or more of: 

a network layer configured to serve as an underlying network for services; 
a transport layer for delivering messages between components of the Web 
Service; 

30 a service description language layer configured to describe service type and 
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functionality of the services of the service provider; 

a transaction routing layer configured to route messages on the transport layer; 

a service discovery layer configured to search for and locate services; 

a service negotiation layer configured to negotiate exchanges between the service 
5 requesters and the service provider; 

a management layer configured for provisioning of the services and for 
monitoring and administration of the services; 

a Quality of Service layer configured to provide reliability, scalability, and 
availability on the Web Service; 
10 a security layer configured to provide authentication, entitlement, and non- 

repudiation security on the transport layer; and 

an Open Standards layer. 

47. The computer-accessible medium as recited in claim 46, wherein the Open 
15 Standards layer is XML. 

48. The computer-accessible medium as recited in claim 46, wherein the network 
layer is the public Internet over TCP/IP. 

20 49. The computer-accessible medium as recited in claim 46, wherein the transport 
layer is one of HTTP, SMTP, and SOAP over HTTP. 

50. The computer-accessible medium as recited in claim 38, wherein the design 
patterns include one or more of: 
25 one or more scalability design patterns; 

one or more reliability design patterns 

one or more manageability design patterns; 

one or more availability design patterns; and 

one or more security design patterns. 

30 
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5L The computer-accessible medium as recited in claim 38, wherein the design 
patterns include one or more of: 

one or more Quality of Services design patterns; 

one or more Integration design patterns; and 

one or more Security design patterns. 

52. The computer-accessible medium as recited in claim 51, wherein the Quality of 
Services design patterns include one or more of: 

a SOAP Cache Design Pattern; 

a Java Message Service (JMS) Bridge Design Pattern; 

a Multiple Servlet Engines Design Pattern; 

an HTTP Load Balancer Design Pattern; 

a State Management Design Pattern; 

a SOAP Logger Design Pattern; 

a High Availability of Service Registry Design Pattern; 

a UDDI Deployment Design Pattern; 

a Publish, Unpublish, and Discover Web Services Design Pattern; 

a Version Management of Deployment and Service Registry Design Pattern; and 

a Registry Content Management Design Pattern. 

53. The computer-accessible medium as recited in claim 51, wherein the Integration 
design patterns include one or more of: 

an Application-to-Application Design Pattern; 

a Standard Build Design Pattern; 

a Hub-Spoke Replication Design Pattern; 

a Federated Replication Design Pattern; 

a Multi-Step Application Integration Design Pattern; 

a Data Exchange Design Pattern; 

a Closed Process Integration Design Pattern; 

an Open Process Integration Design Pattern; 
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a Service Consolidation-Broker Integration design pattern; and 
a Reverse Auction-Broker Integration design pattern. 



54. The computer-accessible medium as recited in claim 51, wherein the Security 
5 design patterns include one or more of: 

a Single Sign-on Design Pattern; and 
a Messaging Transport Design Pattern. 



55. The computer- accessible medium as recited in claim 38, wherein the logical 
10 architecture further comprises a plurality of tiers, wherein the tiers comprise two or more 
of: 

a client tier; 
a presentation tier; 
a business tier; 
15 an integration tier; and 

a resource tier. 



56. A method for designing and implementing a vendor-independent Web Service 
20 architecture, comprising: 

identifying one or more logical components of the Web Service architecture 

according to one or more Use Case requirements for a Web Service; 
translating the one or more use case requirements and one or more technical 
constraints to determine a plurality of heterogeneous Web Service 
25 components; 

categorizing the Web Service components according to a Web Service 

architecture framework; 
organizing the Web Service components according to two or more tiers and two 
or more layers of the Web Service architecture; 
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modifying one or more software components according to one or more 
architecture principles for each of the one or more tiers and the one or 
more layers; 

applying one or more Web Services design patterns to the Web Service 
5 architecture where appropriate; 

implementing a Web Service according to the Web Service architecture; and 
assessing the quality of services of the Web Service after said implementing. 

57. The method as recited in claim 56, wherein said categorizing the Web Service 
10 components according to a Web Service architecture framework comprises categorizing 

the Web Service components into one or more of service delivery, service management, 
identity/policy and services Web Service components. 

58. The method as recited in claim 56, further comprising generating the one or more 
15 Use Cases for the Web Service. 

59. The method as recited in claim 56, wherein the Web Service architecture 
incorporates Quality of Services including reliability, scalability, and availability on the 
Web Service. 

20 

60. The method as recited in claim 56, wherein the Web Service comprises: 

a service provider configured to provide one or more services on the Web Service; 
and 

one or more service requesters configured to access the one or more services from 
25 the service provider via a network; and 

a service broker configured to interact with the service provider and service 

requester to negotiate and provide the services of the service provider to 

the service requester. 

30 61. The method as recited in claim 60, wherein the Web Service further comprises a 
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service registry, wherein the service provider is further configured to register and publish 
the services in the service registry, and wherein the service requester is further configured 
to discover the service provider through the service registry. 

5 62. The method as recited in claim 60, wherein the Web Service is a Business-to- 
Consumer Web Service, wherein the service provider is a business service provider, and 
wherein the service requester is an end user. 

63. The method as recited in claim 60, wherein the Web Service is a Business-to- 
10 Business Web Service, wherein the service provider is a business service provider, and 

wherein the service requester is a server. 

64. The method as recited in claim 56, wherein the layers comprise two or more of: 
a network layer; 

15 a transport layer; 

a service description language layer; 

a transaction routing layer; 

a service discovery layer; 

a service negotiation layer; 
20 a management layer; 

a Quality of Service layer; 

a security layer; and 

an Open Standards layer. 

25 65. The method as recited in claim 56, wherein the tiers comprise two or more of: 

a client tier; 

a presentation tier; 

a business tier; 

an integration tier; and 
30 a resource tier. 
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66. The method as recited in claim 56, wherein the design patterns include one or 
more of: 

one or more Quality of Services design patterns; 
one or more Integration design patterns; and 
one or more Security design patterns. 

67. The method as recited in claim 66, wherein the Quality of Services design patterns 
include one or more of: 

a SOAP Cache Design Pattern; 

a Java Message Service (JMS) Bridge Design Pattern; 

a Multiple Servlet Engines Design Pattern; 

an HTTP Load Balancer Design Pattern; 

a State Management Design Pattern; 

a SOAP Logger Design Pattern; 

a High Availability of Service Registry Design Pattern; 

a UDDI Deployment Design Pattern; 

a Publish, Unpublish, and Discover Web Services Design Pattern; 

a Version Management of Deployment and Service Registry Design Pattern; and 

a Registry Content Management Design Pattern. 

68. The method as recited in claim 66, wherein the Integration design patterns include 
one or more of: 

an Application-to-Application Design Pattern; 

a Standard Build Design Pattern; 

a Hub-Spoke Replication Design Pattern; 

a Federated Replication Design Pattern; 

a Multi-Step Application Integration Design Pattern; 

a Data Exchange Design Pattern; 

a Closed Process Integration Design Pattern; 
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an Open Process Integration Design Pattern; 

a Service Consolidation-Broker Integration design pattern; and 

a Reverse Auction-Broker Integration design pattern. 

69. The method as recited in claim 66, wherein the Security design patterns include 
one or more of: 

a Single Sign-on Design Pattern; and 
a Messaging Transport Design Pattern. 

70. A method for designing and implementing a vendor-independent Web Service 
architecture, comprising: 

identifying and building one or more security components according to one or 

more Use Case requirements for a Web Service; 
identifying one or more Web Service objects of the Web Service architecture to be 

protected; 

defining an object relationship for security protection in the Web Service 
architecture; 

identifying one or more associated trust domains, security policy and strategy, and 
one or more threat profiles for the Web Service architecture; 

determining one or more protection schemes and measures for the Web Services 
objects; 

applying one or more Web Services design patterns to the Web Service 

architecture where appropriate; 
implementing a Web Service according to the Web Service architecture; and 
assessing security levels of the Web Service according to two or more tiers of the 

Web Service architecture after said implementing. 

71. The method as recited in claim 70, further comprising applying one or more Web 
Services security tools to implement the protection schemes. 
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72. The method as recited in claim 70, further comprising generating the one or more 
Use Cases for the Web Service. 

5 73. The method as recited in claim 70, wherein the Web Service comprises: 

a service provider configured to provide one or more services on the Web Service; 
and 

one or more service requesters configured to access the one or more services from 
the service provider via a network; and 
10 a service broker configured to interact with the service provider and service 

requester to negotiate and provide the services of the service provider to 
the service requester. 

74. The method as recited in claim 73, wherein the Web Service further comprises a 
15 service registry, wherein the service provider is further configured to register and publish 

the services in the service registry, and wherein the service requester is further configured 
to discover the service provider through the service registry. 

75. The method as recited in claim 73, wherein the Web Service is a Business-to- 
20 Consumer Web Service, wherein the service provider is a business service provider, and 

wherein the service requester is an end user. 

76. The method as recited in claim 73, wherein the Web Service is a Business-to- 
Business Web Service, wherein the service provider is a business service provider, and 

25 wherein the service requester is a server. 

77. The method as recited in claim 70, wherein the Web Service architecture 
comprises a plurality of layers, where the layers comprise two or more of: 

a network layer; 
30 a transport layer; 
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a service description language layer; 

a transaction routing layer; 

a service discovery layer; 

a service negotiation layer; 

a management layer; 

a Quality of Service layer; 

a security layer; and 

an Open Standards layer. 

78. The method as recited in claim 70, wherein the tiers comprise two or more of: 
a client tier; 

a presentation tier; 
a business tier; 
an integration tier; and 
a resource tier. 

79. The method as recited in claim 70, wherein the design patterns include one or 
more of: 

one or more Quality of Services design patterns; 
one or more Integration design patterns; and 
one or more Security design patterns. 

80. The method as recited in claim 70, wherein the design patterns include one or 
more of: 

a Single Sign-on Design Pattern; and 
a Messaging Transport Design Pattern. 
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